Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/44edefeb-ae8a-3c55-b31e-45d59959251c.roa
File:                     44edefeb-ae8a-3c55-b31e-45d59959251c.roa (raw, json)
Hash identifier:          ntsJhJaGoKHMAUjGI8GCJ7aNL5zkBcgHaufjz4rVZko=
Subject key identifier:   54:7A:69:FF:1A:E8:44:7F:D8:C2:BC:06:91:82:9B:D1:8D:66:23:F1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E4F4D1E5FCD3AE1048600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/44edefeb-ae8a-3c55-b31e-45d59959251c.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.117.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:4f:4d:1e:5f:cd:3a:e1:04:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=1ede8a03-89e2-4a2e-bba0-c88066c16e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:4c:aa:da:83:62:1f:b1:a5:b7:50:d7:cf:
                    a0:07:db:93:c2:39:c3:11:3c:ff:cd:6b:98:45:08:
                    e3:63:d2:f4:b8:37:64:ed:ba:7d:35:27:c4:a4:92:
                    9e:b7:79:f6:37:d5:00:cb:b6:53:36:4b:05:84:7b:
                    82:4d:68:0d:53:6e:0a:3c:2c:2a:b5:9a:86:9a:12:
                    39:c5:4b:55:fa:eb:de:52:68:26:7c:75:93:ca:43:
                    aa:84:ec:ce:ee:3b:00:2e:12:04:46:47:12:4f:a1:
                    58:5f:64:aa:9e:82:89:3f:23:2a:88:b5:98:c1:bd:
                    94:d6:ba:92:9e:06:60:92:5f:e7:b4:fb:03:7e:05:
                    97:d4:40:e9:40:e9:83:6c:8b:73:43:b5:73:6c:97:
                    22:bf:ca:54:29:f0:d7:ca:26:e5:7d:38:99:10:85:
                    0c:42:6b:5f:8a:dc:80:a0:e0:2f:9d:e1:e0:dd:a0:
                    69:b0:1e:e9:69:bf:78:c1:0b:4e:b8:12:8d:ce:f5:
                    c1:bb:d6:54:b4:b6:a0:f9:19:d8:a3:b9:15:ba:2e:
                    ed:db:cd:53:50:0e:08:fa:88:78:23:d2:0f:28:10:
                    29:1b:fa:08:ee:f8:09:f0:c7:ca:5a:e1:ab:6d:43:
                    e6:70:43:f1:c6:78:24:5f:e0:c8:a5:22:63:25:7b:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7A:69:FF:1A:E8:44:7F:D8:C2:BC:06:91:82:9B:D1:8D:66:23:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/44edefeb-ae8a-3c55-b31e-45d59959251c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6c:a2:e6:60:10:da:32:1e:4b:5e:f6:d5:88:e4:4b:d9:a3:
         2f:f8:b9:e4:3f:24:66:1e:2d:6f:03:1f:83:92:6c:88:e8:b1:
         f8:34:5f:8b:a2:85:e6:f2:2d:e5:26:3e:59:2d:a2:06:4d:e9:
         75:d3:cb:13:76:6b:e3:1f:10:bf:4c:8c:ba:e3:d3:50:af:b0:
         6f:34:d6:69:49:d1:d7:6e:c7:57:ca:74:a6:05:59:7e:1a:7b:
         41:a9:ce:ba:45:a6:ef:35:e0:1b:12:5a:c9:e2:c8:28:5a:0a:
         0a:e9:88:a8:2b:c2:e7:45:0e:d5:ad:13:1f:22:28:c4:d0:a4:
         7c:0d:03:80:0c:50:45:b7:fe:0e:de:22:4f:c5:09:38:93:89:
         9d:f4:d5:7f:dd:c6:3d:aa:c0:ab:6c:c1:95:15:06:78:fc:74:
         0e:28:8e:84:d2:45:bd:6c:e5:b4:08:0b:54:7a:8b:fb:ef:49:
         7c:9c:6c:22:e0:f6:02:f0:a2:43:1e:47:0f:26:ad:ef:33:ed:
         f9:ab:88:56:54:5e:54:fa:c4:42:01:79:c5:e9:84:d0:f1:3c:
         a0:74:ed:33:53:d8:8f:a9:0d:09:95:0f:82:50:51:b9:96:16:
         7a:cf:e0:63:5c:ae:f8:72:ff:35:0d:fd:bc:f6:a7:c9:82:b8:
         90:aa:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 14:44:16 2026 by rpki-client